29800 matches found
WordPress NextGen Gallery Sell Photo Plugin Cross Site Scripting
A cross-site scripting vulnerability exists in WordPress NextGen Gallery Sell Photo Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
CVE-2020-23814
Multiple cross-site scripting XSS vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via 1 AppName and 2AddressList parameter in JobGroupController.java file...
CVE-2020-23814
Multiple cross-site scripting XSS vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via 1 AppName and 2AddressList parameter in JobGroupController.java file...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via 1 AppName and 2AddressList parameter in JobGroupController.java file...
CVE-2020-23814
Multiple cross-site scripting XSS vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via 1 AppName and 2AddressList parameter in JobGroupController.java file...
CVE-2020-23814
The xxl-job distributed task scheduling platform version 2.2.0 is vulnerable to multiple Stored Cross-Site Scripting (XSS) vulnerabilities. These flaws exist in the JobGroupController.java file, specifically within the AppName and AddressList parameters. A remote attacker can exploit these vulner...
CVE-2020-24604
A Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version 4.5.1. The XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the GET request "searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescriptio...
Cross site scripting
A Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version 4.5.1. The XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the GET request "searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescriptio...
Apache Ofbiz Cross Site Scripting (CVE-2020-9496)
A cross-site scripting vulnerability exists in Apache Ofbiz. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
WordPress SeedProd Plugin Persistent Cross-Site Scripting (CVE-2020-15038)
A persistent cross site scripting vulnerability exists in WordPress SeedProd Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
CVE-2020-13828
Dolibarr 11.0.4 is affected by multiple stored Cross-Site Scripting XSS vulnerabilities that could allow remote authenticated attackers to inject arbitrary web script or HTML via ticket/card.php?action=create with the subject, message, or address parameter; adherents/card.php with the societe or...
CVE-2020-13828
Dolibarr 11.0.4 is affected by multiple stored Cross-Site Scripting XSS vulnerabilities that could allow remote authenticated attackers to inject arbitrary web script or HTML via ticket/card.php?action=create with the subject, message, or address parameter; adherents/card.php with the societe or...
CVE-2020-13828
Dolibarr 11.0.4 is affected by multiple stored Cross-Site Scripting XSS vulnerabilities that could allow remote authenticated attackers to inject arbitrary web script or HTML via ticket/card.php?action=create with the subject, message, or address parameter; adherents/card.php with the societe or...
SymphonyCMS 3.0.0 - Persistent Cross-Site Scripting
Exploit Title: SymphonyCMS 3.0.0 - Persistent Cross-Site Scripting Google Dork: "lepton cms" Date: 2020-08-28 Exploit Author: SunCSR Sun Cyber Security Research Vendor Homepage: https://www.getsymphony.com/ Software Link: https://www.getsymphony.com/ Version: 3.0.0 Tested on: Windows CVE : N/A...
Cross site scripting
Cross Site Scripting vulnerability in ePO extension in McAfee Application Control MAC prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section...
CVE-2020-7309: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in ePO extension in McAfee Application Control MAC prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section...
PT-2020-19542
Name of the Vulnerable Software and Affected Versions McAfee Application Control MAC versions prior to 8.3.1 Description A Cross Site Scripting issue allows administrators to inject arbitrary web script or HTML via specially crafted input in the policy discovery section. Recommendations For...
WordPress Real-Time Find and Replace Plugin Cross-Site Scripting (CVE-2020-13641)
A cross-site scripting vulnerability exists in WordPress Real-Time Find and Replace Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
VBulletin Persistent Cross Site Scripting
A cross-site scripting vulnerability exists in vBulletin. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Cross site scripting
A cross-site scripting XSS vulnerability in i-doit 1.14.2 allows remote attackers to inject arbitrary web script or HTML via the viewMode, tvMode, tvType, objID, catgID, objTypeID, or editMode parameter...